What is Swag Bucks Toolbar?

Swag Bucks Toolbar is software application developed by Swag Bucks. It is most commonly found on computers running Windows 7 with nearly 74.45% of installations running this operating system. Swag Bucks Toolbar's installer is typically 4.00 MB in size and installs around 26 files. The most common release is 6.10.3.27 with 26.87% of all installations currently using this version.

Swag Bucks Toolbar is most popular in the United States with 92.82% of installations residing in this country.

Swag Bucks Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Swag Bucks Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About Swag Bucks Toolbar?

The Swag Bucks Toolbar is a Conduit Community toolbar designed for use with various web browsers. This toolbar gathers data on the web browsing activities of the user and transmits this data to Conduit for the purpose of suggesting services and generating targeted advertising. Upon installation, there is a possibility that the toolbar will alter the user's web browser's home page and search page, which will need to be manually changed back if the toolbar is uninstalled. Additionally, the toolbar may download and install updates without giving prior notice to the user. According to the OurToolbar End User License Agreement (EULA), "The Application may also collect and store information about your web browsing locally on your device. This locally saved information may interact with the Application and send us information about your web browsing so we can suggest services or provide you ads that may be more relevant to you."

Multiple virus scanners have detected malware in Swag Bucks Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:

Scanner Software	Version	Result
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)

tbSwag.dll (MD5: 895c4812245e244b2f81c71bad0c4e55) has been flagged by 11 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.4246	HW32.Stranfom
ESET-NOD32	7.9311	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	14.01.26.01	Adware/Conduit
VIPRE Antivirus	25610	Conduit (fs)
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	Adware.Win32.Conduit.Y
Dr.Web	7.0.12.3050	Adware.Conduit.299
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
G Data	24	Win32.Application.Conduit.F
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect

tbSwa2.dll (MD5: e4cc410bd005958125cd87c5f6e66371) has been flagged by 4 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.4246	HW32.Stranact.yycu
ESET-NOD32	9577	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	27650	Conduit (fs)

prxtbSwa2.dll (MD5: 480994ae776f86dc885fd654665ebdfa) has been flagged by 8 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16
ESET-NOD32	9631	a variant of Win32/Toolbar.Conduit.X
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	27980	Conduit (fs)
Bkav FE	1.3.0.6379	W32.HfsAdware.C534
G Data	25	Win32.Adware.Conduit.B
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect

prxtbSwa0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 11 scanners:

Scanner Software	Version	Result
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	PUA.Win32.Conduit.BX
ESET-NOD32	10643	Win32/Toolbar.Conduit.X
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
G Data	24	Win32.Application.Conduit.F
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	34366	Conduit (fs)
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16
Bkav FE	1.3.0.6379	W32.HfsAdware.C534
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect

Software Behaviors

Firewall:

Swag_BucksToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.

Scheduled tasks:

uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
Swag_BucksToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:

https://swagbucks.ourtoolbar.com

Support:

https://swagbucks.ourtoolbar.com/help

Installation path:

C:\Program Files\swag_bucks

Uninstaller:

C:\Program Files\Swag_Bucks\uninstall.exe toolbar

Size:

4.00 MB

Language:

English

Swag Bucks Toolbar Executable Details

Primary executable:

tbSwag.dll

Name:

Swag Bucks Toolbar

Path:

C:\Program Files\swag_bucks\tbSwag.dll

MD5:

895c4812245e244b2f81c71bad0c4e55

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

Swag_BucksToolbarHelper.exe

Malware

a320df2b47cfcaf98d06eb59cd72084c

DLL

tbSwa0.dll

Malware

1a8438854dd15e4389f5bdef502c369d

DLL

hk64tbSwag.dll

28d6d1bd1466dd9637d1b2f0b9706ff5

DLL

hktbSwag.dll

f9eb66ae8f8c0ade7faf8ea7d340d332

DLL

ldrtbSwag.dll

2f3d76d0ae0513107531ed7df6ba3e34

DLL

prxtbSwag.dll

5d3504a2c37a82df730a19a08121d0d2

EXE

Swag_BucksToolbarHelper1.exe

0414baa7159457877307ffd6321a9392

DLL

hk64tbSwa2.dll

a6a0e481eb2e7c9f505f4686aaae3b8a

DLL

hktbSwa2.dll

ba44415d1d0cdd0d40dd1880d4cdf27b

DLL

prxtbSwa1.dll

c5544e9a83f0c36c827ca72542f6a194

File Type	Filename	MD5
EXE	Swag_BucksToolbarHelper.exe Malware	a320df2b47cfcaf98d06eb59cd72084c
DLL	tbSwa0.dll Malware	1a8438854dd15e4389f5bdef502c369d
DLL	hk64tbSwag.dll	28d6d1bd1466dd9637d1b2f0b9706ff5
DLL	hktbSwag.dll	f9eb66ae8f8c0ade7faf8ea7d340d332
DLL	ldrtbSwag.dll	2f3d76d0ae0513107531ed7df6ba3e34
DLL	prxtbSwag.dll	5d3504a2c37a82df730a19a08121d0d2
EXE	Swag_BucksToolbarHelper1.exe	0414baa7159457877307ffd6321a9392
DLL	hk64tbSwa2.dll	a6a0e481eb2e7c9f505f4686aaae3b8a
DLL	hktbSwa2.dll	ba44415d1d0cdd0d40dd1880d4cdf27b
DLL	prxtbSwa1.dll	c5544e9a83f0c36c827ca72542f6a194